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EXECUTIVE  SUMMARY 


A  large  number  of  specific  physical  fault  modes  have  been  recog¬ 
nized  to  occur  in  digital  systems  due  to  manufacturing  defects  and 
various  wearout  mechanisms.  These  failures  are  usually  highly  depen¬ 
dent  on  the  fabrication  technology  being  used,  and  may  result  in  very 
complex  faulty  behavior.  To  reduce  the  numbers  and  types  of  faults 
that  must  be  handled  during  test  generation  and  fault  simulation  to 
manageable  levels,  various  logical  fault  modes  have  been  proposed, 
in  which  failures  are  characterized  by  their  effects  on  the  logical 
structure  and  behavior  of  the  system  under  consideration.  The  use 
I  of  logical  rather  than  physical  fault  models  simplifies  fault  analy¬ 
sis,  and  makes  it  relatively  independent  of  circuit  technology.  How¬ 
ever,  not  all  fault  modes  that  occur  in  practice  can  be  easily  or 
accurately  modeled  in  this  manner.  For  example,  some  lines  and  com¬ 
ponents  appearing  in  a  physical  circuit  have  no  counterparts  in  the 
corresponding  logic  circuit  and  vice  versa. 

Logical  fault  modes  can  be  classified  in  terms  of  their  time- 
variance,  the  number  of  primitive  faults  present  simultaneously,  and 
the  fault's  effect  on  component  behavior,  interconnection  structure, 
and  operating  speed.  By  far  the  most  widely  used  fault  model  is  the 
single  stuck  line  or  SSL  model.  An  SSL  fault  allows  any  single  signal 
line  in  a  circuit  to  be  permanently  stuck  at  the  logic  value  0  or  1; 
component  behavior  and  operating  speed  are  unaffected.  The  popularity 
of  the  SSL  model  has  several  reasons.  Many  common  physical  faults  are 
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equivalent  to  SSL  faults.  The  line-by-line  analysis  characteristic  of 
test  generation  techniques  like  the  D-algorithm  makes  SSL  faults  very 
easy  to  handle.  Finally,  practical  experience  indicates  that  test 
sets  derived  for  SSL  faults  thoroughly  exercise  a  circuit,  thereby 
detecting  many  faults  that  cannot  be  modeled  directly  as  SSL  faults. 
However,  except  in  simple  cases,  it  is  very  difficult  to  identify  the 
non-SSL  faults  covered  by  a  given  test  set  for  SSL  faults.  Thus  to 
guarantee  100  percent  fault  coverage,  it  is  generally  necessary  to  con¬ 
sider  other  fault  modes  in  addition  to  SSL  faults. 

If  several  signal  lines  are  allowed  to  be  stuck  simultaneously, 
then  the  multiple  stuck  line  or  MSL  fault  model  is  obtained.  MSL 
faults  are  difficult  to  deal  with  directly,  because  their  number  grows 
exponentially  with  the  number  of  lines  present.  In  practice,  a  complete 
set  of  SSL  tests  can  be  expected  to  cover  all  MSL  faults.  An  MSL  fault 
can  escape  detection  only  if  certain  complex  masking  conditions  are 
present.  Short-circuit  faults  are  more  difficult  to  deal  with.  Their 
number  is  also  large  and,  unlike  stuck-line  faults,  they  can  introduce 
unwanted  feedback.  The  occurrence  of  short-circuit  and  other  non¬ 
standard  fault  modes  can  be  minimized  by  careful  circuit  layout. 

Non-standard  faults  like  short  circuits  are  usually  modeled  by  mod¬ 
ifying  the  original  circuit  so  that  an  SSL  fault  can  be  introduced  that 
is  equivalent  to  the  target  fault  in  the  unmodified  circuit.  Although 
such  "workarounds"  are  costly  to  construct,  they  allow  standard  SSL- 
based  test  software  to  be  applied  to  most  nonstandard  faults.  This  ap¬ 
proach  can  be  used,  for  example,  to  handle  CMOS  faults  that  introduce 


"parasitic"  memory  elements.  Another  fault  mode  found  in  MOS  VLSI 
circuits  is  pattern  sensitivity  caused  by  unwanted  signal  interac¬ 
tions.  Promising  fault  models  for  pattern  sensitive  faults  in  random- 
access  memories  have  been  devised,  but  they  have  not  been  incorpor¬ 
ated  into  test  generation  software.  Heuristic  testing  methods,  whose 
underlying  fault  modes  are  not  explicitly  defined,  continue  to  be  very 
widely  used  for  complex  faults. 
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1.  INTRODUCTION 


This  report  examines  the  fault  modes  that  have  been  used  or  pro¬ 
posed  as  a  basis  for  test  generation  in  digital  systems,  particularly 
systems  employing  very  large  scale  integration  (VLSI).  Of  main  con¬ 
cern  are  logical  fault  models  which  can  be  specified  in  terms  of 
changes  in  the  logical  properties  of  the  unit  under  test.  Also  of 
interest  are  the  relationships  among  the  various  fault  modes  which 
allow  tests  generated  for  one  type  of  fault  to  be  used  to  detect 
other  types  of  faults. 

Chapter  2  is  concerned  with  the  relationship  between  the  physical 
fault  modes  encountered  in  practical  circuits,  and  the  logical  fault 
models  that  have  been  proposed  to  model  them.  The  main  physical  fault 
modes  of  integrated  circuits  are  summarized,  including  wiring  faults, 
metallization  and  dielectric  faults,  parametric  faults,  and  soft  fail¬ 
ures.  The  use  of  logical  models  to  replace  physical  faults  is  discussed. 
It  is  shown  that  this  simplifies  fault  analysis  and  makes  it  relatively 
Independent  of  the  particular  circuit  technology  being  used.  A  set  of 
criteria  for  classifying  fault  modes  is  presented. 

The  remaining  two  chapters  examine  specific  fault  modes  in  detail. 
The  most  widely  used  fault  model,  the  single  stuck  line  or  SSL  model, 
which  allows  any  one  line  in  a  circuit  to  be  stuck  at  logical  0  or  1, 

Is  the  subject  of  Chapter  3.  The  characteristics  of  this  model  are  des¬ 
cribed,  and  its  advantages  and  disadvantages  are  analyzed.  It  is  noted 
that  while  there  are  many  faults  that  are  not  equivalent  to  SSL  faults 


they  can  often  be  detected  by  tests  generated  for  SSL  faults.  Repre¬ 
sentative  non-standard  fault  types  are  considered  in  Chapter  4,  includ¬ 
ing  multiple  stuck  line  or  MSL  faults,  short  circuit  faults,  pattern- 
sensitive  faults,  soft  faults,  and  certain  faults  peculiar  to  CMOS 
circuits.  The  ability  of  SSL  tests  to  detect  these  non-standard  faults 
is  also  discussed.  The  report  concludes  with  a  bibliography  on  faults 
in  digital  circuits. 
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2.  PHYSICAL  VS.  LOGICAL  FAULTS 

Extensive  studies  have  been  made  of  the  physical  failure  modes 
occurring  in  integrated  circuits  [Schnable  and  Keen  1971,  Case  1976, 
Edwards  1980,  Partridge  1980].  Figure  2.1  suirmarizes  the  most  com¬ 
mon  IC  fault  modes.  They  have  two  major  sources:  defects  in  the 
manufacturing  process,  and  component  wearout.  The  frequency  of  oc¬ 
currence  and  relative  importance  of  the  various  faults  depends  on  the 
circuit  type  (TTL,  ECL,  NMOS,  CMOS,  etc.)  and  the  manufacturing  tech¬ 
nology  used. 

IC  Faults 

Package  wiring  faults  are  typically  caused  by  failure  in  the  con¬ 
nections  between  IC  pads  and  the  IC  package  pins.  For  example,  the 
metal -to-metal  bond  formed  between  a  pad  and  a  connecting  wire  can  fail 
forming  an  open  circuit.  Another  class  of  wiring  faults  are  due  to 
failures  of  the  on-chip  metal  connects,  which  are  usually  made  from  al¬ 
uminum  (Al).  Contaminants  like  moisture  inside  the  IC  package  may  cause 
corrosion  in  metal  connectors.  A  phenomenon  called  electromigration, 
which  is  the  tendency  of  Al  atoms  to  flow  in  the  direction  of  an  applied 
electric  current,  can  cause  Al  connectors  to  thin  out  and  break.  Breaks 
can  also  occur  due  to  microcracks  appearing  at  steps  in  an  Al  connector 
that  is  deposited  over  discontinuities  in  the  underlying  dielectric  (us¬ 
ually  SI 02).  Short-cl rcui t  faults  can  be  caused  by  metal  bridging  the 
space  between  two  adjacent  metal  connectors,  a  result  for  example  of  in¬ 
adequate  etching  of  the  space  between  the  connectors. 


Package  wiring  faults 


•  On-chip  metallization  (aluminum)  faults  due  to: 

Corrosion 

Electromigration 

Microcracks 

Bridging 

•  Dielectric  (silicon  dioxide)  faults  due  to: 

Mask  defects 
Electrostatic  discharge 

•  Surface  faults 

•  Threshold  shifts 

•  Pattern  sensitivity 

•  Soft  faults  due  to: 

Alpha  particles 
Cosmic  rays 


Fig.  2.1.  Representative  physical  failure  modes  in  integrated 
circuits. 


An  IC  may  also  fail  due  to  physical  defects  in  the  Si 02  dielec¬ 
tric  used  to  insulate  the  various  devices  on  the  chip.  Defects  like 
dust  particles  on  the  photographic  masks  used  during  manufacture  can 
create  holes  (pinhole  defects)  in  an  Si02  layer.  Such  holes  can  also 
be  caused  by  electrostatic  discharge  due  to  improper  handling  or  shield¬ 
ing.  The  latter  problem  is  most  corrmon  in  MOS  circuits  which  contain 
very  thin  oxide  layers. 

Other  physical  fault  modes  listed  in  Fig.  2.1  include  changes  in 
the  IC's  surface  state  resulting  in  excessive  leakage  currents.  Thres¬ 
hold  voltages  in  MOS  circuits  can  shift  due  to  the  movement  of  elec¬ 
tric  charges  on  or  in  an  Si02  layer.  Unwanted  interactions  between 
signals  that  are  adjacent  in  time  or  space  can  result  in  pattern  sensi¬ 
tivity.  Pattern  sensitive  faults  are  a  consequence  of  the  high  compo¬ 
nent  densities  characteristic  of  VLSI,  and  are  usually  found  in  chips 
containing  large  random-access  memories  (RAMs).  Also  Common  in  high- 
density  RAMs  are  the  so-called  "soft"  failures  caused  by  radiation  that 
can  effectively  alter  a  logical  state  represented  by  a  stored  charge. 
Trace  amounts  of  radioactive  elements  in  the  IC  package  material  pro¬ 
duce  a-particles  that  can  cause  intermittent  errors  by  destroying  a 
charge  packet.  Similar  effects  can  be  caused  by  cosmic  radiation. 

Logical  Fault  Models 

Given  any  physical  fault  mechanism  in  a  digital  circuit,  it  is 


always  possible,  at  least  in  principle,  to  determine  its  effect  on 
the  logical  behavior  of  the  circuit.  For  example.  Fig.  2.2a  shows  a 


Fig.  2.2.  (a-c)  A  dlode-trans 

of  the  fault  "x,  sh 
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diode-transistor  realization  of  a  3-input  NAND  gate  G,  which  is  rep¬ 
resented  symbolically  in  Fig.  2.2b.  Two  voltage  levels  (high)  and 
(low)  define  the  logic  values  1  and  0,  respectively.  The  logical 
behavior  of  G  is  described  by  the  truth  table  of  Fig.  2.2c.  Suppose 
that  the  following  physical  fault  f  occurs  in  G:  input  line  Xj  is 
accidentally  connected  (short  circuited)  to  V^.  THis  could  be  expec¬ 
ted  to  have  the  effect  shown  in  Fig.  2. 2d  where  the  faulty  output  func¬ 
tion  zj  is  now  independent  of  the  value  of  x^.  We  can  readily  define 
a  logical  fault  fL  which  mirrors  precisely  the  effect  of  f  .  Discon¬ 
nect  input  line  x^  from  the  fault-free  gate  G,  and  apply  a  constant 
logical  1  to  the  disconnected  input  as  shown  in  Fig.  2.2e.  This  logi¬ 
cal  fault,  usually  referred  to  as  "line  Xj  stuck  at  logical  1"  is  equiv 
alent  to  fp.  Note  that  while  fp  may  be  an  internal  fault  in  G,  the 
logical  model  assumes  that  G  is  fault-free  and  associates  a  fault  with 
an  interconnection  line. 

There  are  several  advantages  to  using  logical  instead  of  physical 
fault  models  in  digital  fault  mode  analysis. 

(1)  Once  we  have  a  logical  fault  model  that  adequately  reflects 
the  physical  failure  modes  of  a  circuit,  fault  analysis  becomes  a  log¬ 
ical  rather  than  a  physical  problem. 

(2)  It  is  possible  to  construct  logical  fault  models  that  are 
applicable  to  many  different  technologies,  in  which  case  fault  analy¬ 
sis  becomes  relatively  technology-independent.  This  means  that  com¬ 
puter  programs  for  fault  simulation  and  test  generation  can  be  written 
that  do  not  lose  their  usefulness  with  changes  in  technology.  For  ex¬ 
ample,  although  the  diode-transistor  circuit  technology  illustrated  in 


Fig.  2.2a  is  now  largely  obsolete,  the  "stuck-at-0/1"  logical  fault 
model  used  in  this  example  is  applicable  to  essentially  all  types  of 
semiconductor  circuits. 

(3)  Using  logical  fault  models  it  may  be  possible  to  derive 
tests  for  faults  whose  physical  cause  is  unknown,  or  whose  effect  on 
circuit  behavior  is  not  completely  understood. 

(4)  A  logical  fault  model  often  covers  a  large  number  of  dif¬ 
ferent  physical  faults,  resulting  in  a  substantial  decrease  in  the 
complexity  of  fault  analysis. 

Various  criteria  may  be  used  for  classifying  both  physical  and 
logical  faults;  Fig.  2.3  lists  the  most  important  ones.  It  is  usually 
assumed  that  faults  are  permanent,  i.e.,  invariant  with  respect  to  time. 
Time-varying  faults  do  occur,  particularly  intermittent  faults,  where 
the  circuit  moves  in  an  apparently  random  fashion  between  the  fault- 
free  state  and  some  fixed  faulty  state.  An  intermittent  fault  can  only 
be  detected  if  an  appropriate  test  pattern  is  applied  to  the  circuit 
under  test  during  one  of  its  faulty  periods.  The  models  that  have  been 
proposed  for  analyzing  intermittent  faults  [Ball  and  Hardy  1959,  Breuer 
1973]  require  statistical  data  on  the  probability  of  fault  occurrence; 
unfortunately  this  type  of  information  is  normally  unavailable.  Tran¬ 
sient  faults  also  occur  randomly,  but,  unlike  intermittent  faults,  are 
not  repetitive;  soft  errors  induced  by  a-particles  are  usually  consid¬ 
ered  to  be  transient. 


Variability  with  respect  to  time: 


Permanent 

Intermittent 

Transient 

•  Number  of  primitive  faults  that  may  be  present 
simultaneously: 

Single  faults 

Multiple  faults 

•  Effect  on  components 

•  Effect  on  interconnections  between  components 

•  Effect  on  operating  speed 


Fig.  2.3.  Parameters  for  classifying  faults  in  digital 
systems. 
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Another  basic  assumption  in  fault  mode  analysis  is  that  only 
single  faults  affecting  just  one  component  or  connection  need  be 
detected.  This  assumption  is  justified  in  field  testing  by  the  fact 
that  the  probability  of  a  single  fault  is  usually  much  greater  than 
that  of  a  multiple  fault.  Thus  if  testing  is  carried  out  often  enough, 
most  of  the  faults  that  are  encountered  will  be  single  faults.  More¬ 
over,  most  multiple  faults  can  be  detected  by  testing  for  the  individ¬ 
ual  single  faults  of  which  they  are  composed.  It  is  difficult  to  deal 
with  multiple  faults  directly  because  their  number  tends  to  be  ex¬ 
tremely  large.  If  a  particular  (logical)  fault  model  allows  n  indepen¬ 
dent  single  faults,  then  there  are  (£)  possible  multiple  faults  of  mul¬ 
tiplicity  k.  For  example,  if  n*  1000,  then  there  are  about  half  a  mil¬ 
lion  double  faults  (k  =  2)  and  about  1.66*  108  triple  faults  (k=3).  For 
a  newly  manufactured  part,  the  probability  of  a  multiple  fault  is  usually 
much  higher  than  that  of  a  single  fault.  Again  it  is  usually  assumed 
that  a  comprehensive  test  set  based  upon  the  single  fault  assumption 
will  detect  faulty  components  containing  multiple  faults. 

The  types  of  faults  encountered  in  circuit  components  can  often  be 
restricted  by  very  general  physical  arguments.  Consider,  for  example, 
the  3- input  NAND  gate  G  of  Fig.  2.2  which  realizes  the  function  Zj  = 
XjXgXg.  It  is  unlikely  that  a  fault  can  change  z^  to  say  *i+x2+x3  (the 
NOR  function),  because  this  would  require  a  major  change  in  the  switch¬ 
ing  threshold  of  the  gate,  i.e.,  in  net  input  signal  level  at  which  the 
output  signal  changes  value.  Similarly,  a  change  to  the  EXCLUSIVE-OR 
function  x^exgQx^  is  highly  improbable  as  it  would  require  an  increase 
in  the  number  of  threshold  levels.  It  can  be  assumed  for  most  technol- 
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ogles  that  a  fault  will  not  change  the  basic  gate  type;  a  faulty 
NAND  gate  remains  a  NANO.  This  assumption  enables  us  to  restrict 
the  possible  faulty  function  for  G  to  the  following  set  of  eight 
NAND  functions:  0 , 1 , x^xj, x^xj.x^.x j , x2 , x3 .  This  is  a  small  sub¬ 
set  of  the  256  distinct  switching  functions  of  up  to  three  variables. 

Faults  that  change  circuit  interconnection  topology  include 
open  circuits  (the  breaking  of  a  connection)  and  short  circuits  (the 
establishment  of  a  connection  between  two  normally  unconnected  points). 
Open  circuit  faults  are  fairly  easy  to  model.  The  signal  source  end 
of  an  open  connection  has  no  further  effect  on  the  circuit.  The  sink 
end  of  the  connection  generally  remains  fixed  at  the  logical  0  or  1 
value.  Short  circuit  behavior  is  much  more  difficult  to  analyze,  and 
fault  models  tend  to  be  technology  dependent. 

Changes  in  the  signal  propagation  delay  of  the  various  components 
and  connections  in  a  logic  circuit  can  also  cause  erroneous  behavior. 
For  example,  suppose  the  input  pattern  (xj.X2.X2)  applied  to  the  3-input 
NAND  G  is  required  to  change  at  time  t  from  (1,1,0)  to  (1,0,1).  This 
should  cause  no  change  in  the  value  or  Zj  which  should  remain  at  1. 
Suppose,  however,  that  due  to  changes  in  signal  delays,  Xj  changes 
value  At  seconds  before  Xg,  then  (1,1,1)  will  be  applied  to  G  for  At 
seconds.  If  At  is  sufficiently  long  to  overcome  the  inertia  inherent 
in  every  physical  device,  a  spurious  0  signal  will  appear  at  Zj.  The 
propagation  delays  of  logic  gates  and  connections  are  difficult  to 
measure  and  can  vary  within  wide  tolerances.  For  this  reason,  conserv¬ 
ative  or  worst-case  design  techniques  are  usually  employed,  as  well  as 
synchronization  (clock)  signals  to  compensate  for  minor  variations  in 


signal  delays.  Direct  analysis  of  delay  faults  is  feasible  only  1 
certain  types  of  circuits  [Lesser  and  Shedletsky  1980]. 


3.  STANDARD  FAULT  MODEL 


Most  work  to  date  in  digital  system  testing,  both  theoretical 
and  applied,  has  employed  a  logical  fault  model  that  is  referred  to 
here  as  the  single  stuck  line  or  SSL  model.  In  this  chapter  the  SSL 
model  is  defined,  and  its  advantages  and  disadvantages  are  analyzed. 

Model  Definition 

In  a  single  stuck  line  (SSL)  fault,  exactly  one  logical  connec¬ 
tion  in  a  circuit  may  be  permanently  stuck  at  logical  one  (s-a-1)  or 
stuck  at  logical  zero  (s-a-0).  Circuit  components  like  gates  and 
flip-flops  are  assumed  to  be  fault-free.  Figure  2.2  illustrates  a 
typical  SSL  fault,  in  this  case  a  primary  input  line  of  a  NAND  gate 
that  is  s-a-1.  In  terms  of  the  fault  classification  of  Fig.  2.3,  SSL 
faults  have  the  following  attributes: 

•  Faults  are  permanent  or  time-invariant. 

•  Only  one  fault  is  present  at  a  time. 

•  Circuit  components  are  unaffected  by  the  fault. 

•  Any  logic  line  may  be  stuck  at  0  or  1. 

•  Operating  speed  is  unaffected. 

In  order  to  analyze  the  usefulness  of  the  SSL  fault  model  (or 
any  other  model),  the  concepts  of  fault  equivalence  and  fault  domin¬ 
ance  are  helpful.  Two  physical  or  logical  faults  Fj  and  Fg  in  a  given 
circuit  N  are  equivalent ,  denoted  F^Fg,  ^  N  realizes  the  same  circuit 


function  with  Fj  present  as  It  does  with  F2  present.  In  other  words, 

Fj  and  F^  have  exactly  the  same  effect  on  the  behavior  of  N.  A  test 
T  detects  Fj  if  and  only  if  it  detects  Fg.  Fj  and  F2  can  be  distin¬ 
guished  by  external  testing  only  if  FjffcFg.  If  every  test  T  that  de¬ 
tects  Fj  also  detects  F2,  we  say  that  F1  dominates  F2.  Fault  domin¬ 
ance  is  a  weaker  relationship  than  fault  equivalence,  since  Fj^  can 
dominate  F2  without  being  equivalent  to  F2. 

Advantages 

There  are  several  reasons  why  the  SSL  model  has  become  the  clas¬ 
sical  logical  fault  model  for  digital  fault  analysis. 

(1)  Many  physical  faults,  such  as  open-circuited  lines,  and 
lines  that  are  short-circuited  to  power  or  ground,  are  equivalent  to 
SSL  faults.  They  can  therefore  be  precisely  analyzed  with  this  logical 
model. 

(2)  Test  generation  for  SSL  faults  is  relatively  easy.  Most  test 
generation  methods,  such  as  the  O-algorithm  and  LASAR  [Breuer  and 
Friedman  1976]*  use  a  technique  called  path  sensitization  illustrated 
by  Fig.  3.1.  Suppose  that  the  SSL  fault  (output  of)  GQ  s-a-1  is  to  be 
detected.  It  suffices  to  apply  a  pattern  of  input  signals  to  the  circuit 
which  creates  a  path  (shown  by  the  heavy  line  in  Fig.  3.1)  over  which 

an  error  signal  can  propagate  from  the  faulty  line  to  an  observable 


* 


See  also  Report  No.  AC  1.81  "Test  Generation"  in  this  series. 
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output  of  the  circuit,  in  this  case  the  output  line  Zj.  This  path 
Is  said  to  be  sensitized  since  any  change  In  the  signal  applied  to 
the  input  end  of  the  path  propagates  to  the  output  end.  The  fact 
that  an  SSL  fault  is  associated  with  a  single  line  in  the  circuit 
makes  it  well  suited  to  the  line-by-line  analysis  required  for  path 
sensiti zation. 

(3)  Using  standard  path  sensitization  techniques,  tests  for 
many  SSL  faults  can  be  generated  simultaneously  thereby  reducing  test 
generation  costs.  Consider  again  the  circuit  of  Fig.  3.1  where  it  is 
desired  to  obtain  a  test  for  the  SSL  fault  Gq  s-a-1.  Let  E/E  denote 
the  signal  on  a  line  in  cases  where  the  state  of  the  line  is  E  if  no 
fault  is  present  and  E  if  GQ  is  s-a-1.  Thus  a  test  for  this  fault 
must  apply  0/1  to  the  output  line  of  GQ.  It  must  also  apply  a  signal 
of  the  form  E/E  to  every  line  along  the  sensitized  path  in  order  for 
the  desired  error-signal  propagation  to  take  place.  This  implies  that 
the  given  test  pattern  will  detect  an  SSL  fault  of  the  s-a-E  type  asso¬ 
ciated  with  every  line  on  the  sensitized  path.  If  the  test  generation 
procedure  creates  long  sensitized  paths,  then  a  test  for  many  SSL  faults 
will  be  constructed  in  one  step.  This  feature  of  the  SSL  model  is  ex¬ 
ploited  in  the  widely-used  LASAR  test  generation  program  [Thomas  1971]. 

(4)  The  number  of  SSL  faults  that  must  be  dealt  with  is  relatively 
small  and  manageable.  For  example,  if  a  circuit  contains  N  distinct 
logic  lines,  then  there  are  2N  possible  SSL  faults.  This  number  can 

be  further  reduced  by  using  equivalence  and  dominance  properties  to 
eliminate  faults  that  will  be  detected  by  tests  generated  for  other 
faults. 
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(5)  Experience  accumulated  over  the  past  twenty  years  suggests 
that  many  fault  types  that  are  not  equivalent  to  SSL  faults,  such  as 
shorts  between  logic  signals  and  multiple  stuck-line  faults,  are  ne¬ 
vertheless  detected  by  test  sets  constructed  to  detect  SSL  faults. 

In  other  words,  many  fault  modes  are  dominated  by  SSL  faults.  This 
may  be  explained  intuitively  by  the  fact  that  a  complete  set  of  tests 
for  SSL  faults  exercises  every  line  in  a  circuit  and  propagates  the 
effect  of  this  exercising  to  the  primary  outputs.  Furthermore,  a 
reasonably  complete  set  of  test  patterns  is  applied  to  each  gate  in 
the  circuit  thus  activating  internal  non-SSL-equivalent  fault  modes. 
This  follows  from  the  fact  that  at  least  n+1  test  patterns  must  be 
applied  to  any  n-input  logic  gate  of  the  AND,  OR,  NAND,  NOR  or  NOT 
type  in  order  to  detect  the  SSL  faults  associated  with  the  gate's  in¬ 
put  and  output  lines.  The  average  number  of  inputs  per  gate  nau  in 
a  typical  digital  system  is  around  2  or  3.  For  n_  =  3,  a  set  of  SSL 

aV 

based  tests  must  therefore  apply  at  least  four  test  patterns  to  the 
average  gate,  which  is  50%  or  more  of  the  possible  input  patterns  that 
exist  for  the  gate.  This  can  be  regarded  as  exercising  the  average 
gate  fairly  thoroughly  for  most  possible  faults. 


Pi sadvantages 

In  spite  of  the  above  advantages,  the  SSL  model  does  not  encompass 
all  testing  problems.  There  are  many  physical  lines  in  integrated  cir¬ 
cuits,  for  example,  power  and  ground  lines,  which  do  not  appear  in 
standard  logic  diagrams;  conversely  not  all  lines  In  logic  diagrams  cor 
respond  to  physical  connectors  [Galiay  et  al.  1980],  Although  an  SSL- 


based  test  set  can  be  expected  to  cover  most  faults  occurring  in 
practical  circuits,  to  guarantee  TOO  percent  coverage  of  such  faults, 
non-SSL  faults  must  be  explicitly  considered.  Furthermore,  there  are 
many  fault  situations  where  one  or  more  of  the  basic  assumptions  un¬ 
derlying  the  SSL  model  does  not  hold.  Fc-  instance,  soft  faults  (see 
Fig.  2.1),  unlike  SSL  faults,  are  transient,  and  so  are  likely  to 
escape  detection  by  SSL  tests  that  are  applied  periodically  under  the 
assumption  that  a  fault  remains  after  it  first  occurs.  The  single¬ 
fault  assumption  may  not  be  valid  for  faults  occurrring  during  manu¬ 
facture,  which  frequently  affect  many  lines  and  components  of  a  cir¬ 
cuit.  Multiple  faults  are  also  encountered  during  field  testing,  es¬ 
pecially  when  maintenance  intervals  are  long,  thereby  allowing  single 
faults  to  accumulate.  The  analysis  of  such  non-SSL  faults  is  considered 
in  the  following  chapter. 


19 


4.  OTHER  FAULT  MODELS 

There  are  numerous  situations  where  known  physical  faults  are 
not  equivalent  to  or  dominated  by  SSL  faults.  To  handle  such  faults, 
a  variety  of  logical  models  have  been  proposed.  The  more  important 
of  these  nonstandard  fault  modes  are  examined  in  this  chapter. 

Multiple  Stuck-Line  Faults 

A  straightforward  way  to  extend  the  standard  SSL  model  of  the 
preceding  chapter  is  to  lift  the  constraint  that  only  one  logical  con¬ 
nector  may  be  s-a-0  or  s-a-1  at  any  time.  The  result  is  the  multiple 
stuck  line  or  MSL  fault  model.  As  in  the  SSL  model,  faults  are  assumed 
to  be  permanent,  and  the  circuit  components  and  circuit  operating  speed 
are  assumed  to  be  fault-free.  MSL  faults  are  of  interest  for  several 
reasons. 

(1)  They  can  be  used  to  model  far  more  physical  faults  than  the 

SSL  model.  If  a  circuit  contains  N  distinct  logic  lines,  there  are  2N 

N 

possible  SSL  faults,  but  there  are  3  -1  possible  MSL  faults. 

(2)  As  IC  component  density  increases,  physical  failures  are  more 
likely  to  affect  many  lines  and  components.  Such  multiple  faults  more 
closely  resemble  MSL  than  SSL  faults. 

(3)  Use  of  the  MSL  model  can  sometimes  simplify  SSL  fault  analysis. 
For  example,  in  generating  SSL  tests  for  all-NAND  circuits,  s-a-0  faults 
can  be  ignored  if  one  is  willing  to  consider  both  single  and  multiple 
s-a-1  faults  [Hayes  1971].  In  a  sequential  circuit,  an  SSL  fault  may. 
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over  a  period  of  time,  propagate  faulty  signals  to  many  different 
parts  of  the  circuit.  Multiple  fault  models  may  then  be  most  appro¬ 
priate  for  analyzing  the  subsequent  behavior  of  the  circuit  [Breuer 
and  Friedman  1976]. 

The  main  difficulty  in  dealing  with  MSL  faults  is  the  vast  num¬ 
ber  of  such  faults,  which  grows  exponentially  with  the  number  of  lines 
present.  Hence  no  commercial  test  generation  systems  deal  explicitly 
with  MSL  faults.  However,  it  has  long  been  recognized  that  the  SSL 
faults  tend  to  dominate  the  MSL  faults.  In  other  words,  a  set  of  tests 
T  that  detect  all  SSL  faults  in  a  circuit  is  likely  to  detect  most,  if 
not  all,  MSL  faults.  This  is  to  be  expected  in  view  of  the  fact  that 
T  must  detect  each  component  SSL  fault  fi  of  a  multiple  fault  F  = 

(f1»f2.* • • .fk)  comprising  k  stuck  lines.  It  is  possible,  however,  for 
T  to  fail  to  detect  some  MSL  fault  due  to  the  phenomenon  of  fault  mask¬ 
ing.  Suppose,  for  example,  that  in  addition  to  the  target  fault  f-j  =  GQ 
s-a-1,  the  circuit  of  Fig.  3.1  contains  a  second  fault  f2~Gi  s-a-1.  The 
given  test  pattern  detects  fj,  but  does  not  detect  the  MSL  fault  (fj,f2). 
This  is  due  to  the  fact  that  error  propagation  from  f^  to  z ^  along  the 
sensitized  path  is  blocked  or  masked  at  by  the  presence  of  fg. 

In  general,  an  SSL  test  can  fail  to  detect  a  multiple  fault 
(fj»f2,. • . ,fk)  if  the  detection  of  each  component  fault  f^  is  masked  by 
the  remaining  faults.  The  masking  conditions  for  undetectability  are 
relatively  complex,  and  not  frequently  encountered  in  practice.  This 
justifies  the  common  assumption  that  SSL  tests  are  adequate  for  MSL  de¬ 
tection.  However,  it  is  usually  not  possible  to  guarantee  that  a  given 
SSL  test  set  covers  all  MSL  faults  without  detailed  analysis.  A  few 
classes  of  combinational  logic  are  known  for  which  complete  sets  of  SSL 
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tests  are  guaranteed  to  detect  all  MSL  faults.  Schertz  has  defined 
a  restricted  logic  circuit  [Schertz  and  Metze  1972]  as  one  that  sat¬ 
isfies  the  following  two  conditions. 

(1)  It  contains  no  subcircuit  with  the  same  interconnection 
pattern  as  the  5-gate  circuit  of  Fig.  4.1a. 

(2)  Only  the  primary  input  lines  may  fan  out  to  two  or  more 
gates. 

Figure  4.1b  shows  such  a  circuit.  Restricted  circuits  include  the 
important  class  of  2-level  circuits.  They  have  the  very  useful  pro¬ 
perty  that  every  complete  SSL  test  set  is  also  a  complete  MSL  test 
set.  A  slightly  weaker  result  exists  for  the  class  of  fanout-free 
circuits.  A  fanout-free  circuit  is  one  in  which  every  signal  line  is 
connected  to  at  most  one  gate.  This  implies  that  there  is  only  one 
path  from  every  line  to  the  primary  output.  It  can  be  shown  [Hayes 
1971]  that  for  every  fanout-free  circuit  there  exists  a  minimal  SSL 
test  set  which  is  also  an  MSL  test  set.  Not  every  SSL  test  set  for 
a  fanout-free  circuit  detects  all  multiple  faults,  but  simple  proce¬ 
dures  are  known  for  generating  minimal  SSL  test  sets  that  also  detect 
all  MSL  faults. 

Short  Circuit  Faults 

A  large  percentage  of  the  physical  faults  occurrring  in  modern 
integrated  circuits  can  be  classified  as  short-circuit  (SC)  or  bridg¬ 
ing  faults,  where  two  normally  disconnected  logic  lines  become  con¬ 
nected  [Nicholls  1979],  Short  circuit  faults  are  significantly  more 
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complex  than  stuck-line  faults,  since  the  signals  associated  with  the 
shorted  lines  are,  in  general,  variable  rather  than  constant.  Further¬ 
more,  the  number  of  single  SC  faults,  i.e.,  faults  involving  just  one 
pair  of  shorted  lines,  in  an  N-line  circuit  is  (!j) =  N(N-l)/2,  which  is 
considerably  more  than  the  2N  possible  SSL  faults.  Based  upon  the  lay¬ 
out  of  a  circuit  it  is  possible  to  determine  pairs  of  wires  between 
which  a  short  is  impossible  [Galiay  et  al.  1981].  Based  upon  such  an 
analysis  the  total  number  of  short  faults  which  need  be  considered  can 
be  drastically  reduced. 

An  SC  fault,  unlike  an  SSL  or  MSL  fault,  can  introduce  spurious 
feedback  that  converts  a  combinational  circuit  into  a  sequential  cir¬ 
cuit.  Short  circuits  can  also  result  in  unexpected  fault  modes  that 
depend  on  the  circuit  technology  being  used.  For  example,  in  diode- 
transistor  logic  circuits  like  that  of  Fig.  2.2a,  a  shorted  diode  in 
an  input  line  of  a  gate  can  affect  the  output  of  a  different  gate 

Gg,  if  Gj  and  G^  derive  inputs  from  a  common  source  [Friedman  1974], 

* 

An  SC  fault  involving  two  signal  lines  Zj  and  z2  has  the  general 
form  depicted  in  Fig.  4.2.  In  many  current  circuit  technologies  the  new 
logic  signals  and  cp2(z2,z3)  created  by  the  fault  correspond 

to  wired  logic  functions  where  cpj  =  cp2  =  cp,  and  either  cp(zj,z2)  =  ZjZ2 
(wired-AND  case)  or  <p(z^,z2) =  z^+z2  (wired-OR  case).  However,  in  a 
significant  number  of  cases  cp  assumes  an  indeterminate  value  differ¬ 
ent  from  0  or  1.  Research  into  SC  fault  modes  has  generally  been  re¬ 
stricted  to  faults. that  result  in  well-defined  wired-AND  or  wired-OR 
behavior  [Mei  1974,  Karpovsky  and  Su  1980], 
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As  in  the  case  of  MSL  faults  experience  indicates  that  most  SC 
faults  are  detected  by  a  complete  set  of  SSL  tests.  For  certain  SC 
faults  this  can  be  guaranteed.  An  input  bridging  fault  is  an  SC  fault 
that  only  involves  the  input  lines  of  a  single  gate.  It  is  assumed 
that  there  is  no  point  of  fanout  between  the  site  of  the  short  circuit 
and  the  gate  in  question.  It  can  be  shown  that  every  SSL  test  set  de¬ 
tects  all  input  bridging  faults  of  this  type  [Friedman  1974,  Mei  1974]. 

A  general  technique  for  modeling  SC  faults  has  been  proposed  in 
[Kaposi  and  Kaposi  1972].  Suppose  that  a  short  circuit  between  lines 
z1  and  z2  as  in  Fig.  4.2  results  in  a  wired  OR.  For  fault  analysis, 
replace  these  two  lines  by  the  circuit  shown  in  Fig.  4.3.  Under  fault- 
free  conditions  cp^z^Zg)  =  Zj  and  cp2(z1z2)  =  z2-  If  the  fault  f=line 
x  s-a-1  is  present  in  this  circuit,  then  both  cpj  and  cp2  change  to  Zj+z2. 
Hence  the  problem  of  detecting  the  SC  fault  in  the  original  circuit 
has  been  transformed  into  the  problem  of  detecting  the  SSL  fault  f  in 
the  modified  circuit.  This  modeling  technique  can  be  extended  to  a 
wide  class  of  faults,  its  usefulness  being  limited  by  the  complexity  of 
the  modified  circuit. 

Pattern  Sensitive  Faults 

VLSI,  with  its  great  increase  in  the  component  density  of  inte¬ 
grated  circuits,  has  stimulated  interest  in  a  new  class  of  faults  called 
pattern-sensitive  faults  (PSFs)  or  adjacent  pattern  interference  faults 
(APIs)  [Hayes  1975  and  1980,  Srini,  1977,  Nickel  1980].  PSFs  are  caused 
by  unwanted  interference  between  signals  that  are  adjacent  in  time  or 
space.  They  are  most  prevalent  in  high-density  ICs  like  RAMs  where  com- 
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ponents  (memory  cells  and  signal  lines)  are  packed  very  closely  to¬ 
gether,  and  signal -to-noise  ratios  are  relatively  small.  PSFs  result 
primarily  from  electromagnetic  interaction  between  closely-packed 
lines  and  signals.  They  are  particularly  difficult  to  detect  because 
they  are  often  both  data-pattern  and  data-rate  dependent.  Consequently 
they  may  appear  to  be  intermittent  or  transient  faults. 

A  variety  of  different  physical  fault  mechanisms  are  responsible 
for  PSFs,  making  it  difficult  to  define  logical  fault  models  to  repre¬ 
sent  them.  Several  such  models  have  been  proposed  for  PSFs  in  RAMS. 

A  very  general  model  is  described  in  [Hayes  1975]  in  which  each  1-bit 
cell  of  a  RAM  is  associated  with  a  set  of  cells  NfC^)  called  the 
neighborhood  of  C^.  N(C^ )  defines  the  range  of  spatial  pattern  sensi¬ 
tivity  around  C^.  A  PSF  is  said  to  be  present  in  if  a  read  or  write 
operation  addressed  to  affects  or  is  affected  by  the  data  pattern 
stored  in  N(C^).  This  is  a  type  of  functional  fault  model  which  re¬ 
quires  detection  of  essentially  any  functional  change  in  the  sub-RAM 
defined  by  N( ) .  The  problem  of  generating  tests  for  this  kind  of 
fault  is  equivalent  to  the  classical  problem  of  generating  a  checking 
sequence  for  a  sequential  machine  [Friedman  and  Menon  1971],  It  is 
not  difficult  to  generate  checking  sequences  for  RAMs  because  of  their 
relatively  simple  state  behavior.  However,  the  length  of  these  se¬ 
quences  Increases  exponentially  with  neighborhood  size.  Hence  in  order 
to  obtain  test  sequences  of  manageable  size,  it  is  necessary  to  restrict 
N(Cj)  to  a  small  number  of  cells. 


Several  studies  of  RAM  PSFs  have  been  carried  out  in  which  NfC^) 
is  restricted  to  C..  and  its  four  or  six  nearest  neighbors  [Srini  1977, 

Hayes  1980,  Suk  and  Reddy  1980].  In  general,  if  N(C. )  forms  a  k-cell 
neighborhood  of  regular  structure,  a  so-called  tiling  neighborhood, 
then  all  PSFs  in  an  n-bit  RAM  can  be  detected  by  a  test  sequence  com- 
prising  at  most  (3k+2)2  n  reads  and  writes  [Hayes  1980].  For  example, 
if  k  =  5,  then  the  test  length  is  544n,  a  manageable  number.  Test 
length  can  be  further  reduced  by  imposing  additional  restrictions  on 
PSF  behavior.  Suk  and  Reddy,  for  example,  have  developed  efficient  test 
generation  methods  under  the  assumption  that  all  reads  and  certain  write 
operations  cannot  induce  PSFs  [Reddy  &  Suk  1979, Suk  &  Reddy  1980].  Nair 
et  al.  also  define  a  simplified  PSF  model  using  the  concept  of  cell  coupling 
[Nair  et  al.  1978].  Two  cells  are  coupled  if  a  write  operation  ad¬ 
dressed  to  one  cell  of  a  pair  causes  the  other  cell  to  change  state. 

Like  the  Suk  and  Reddy  model,  coupled-cell  faults  include  PSFs  affect¬ 
ing  read  operations  only.  Test  generation  methods  are  known  for  de¬ 
tecting  all  faults  of  this  kind  involving  coupled  cell -pairs;  however, 
these  methods  have  not  been  extended  to  coupled  faults  involving  three 
or  more  cells.  In  general,  the  various  PSF  models  discussed  above 
have  not  been  verified  experimentally,  so  their  validity  remains  open 
to  question.  In  practice,  PSF  detection  methods  are  based  on  heuris¬ 
tic  procedures  like  the  GALPAT  test  [Breuer  and  Friedman  1976],  which 
employ  no  explicit  fault  model. 


Miscellaneous  Faults 


The  faults  discussed  in  the  preceding  sections  are  time-invariant 
or  "hard"  faults.  The  increasing  chip  densities  of  VLSI  circuits,  par¬ 
ticularly  RAMs,  has  resulted  in  an  increase  in  the  frequency  of  transi¬ 
ent  or  "soft"  faults  caused  primarily  by  alpha  particle  radiation  [May 
1979,  May  et  al.  1980].  These  soft  faults  are  of  two  main  types:  stor¬ 
age  faults  that  cause  the  state  of  a  memory  element  to  change  (from  0 
to  1  or  from  1  to  0),  and  sensing  faults  that  cause  incorrect  logic 
signals  to  appear  on  address  or  sense  amplifier  lines.  In  each  case,  no 
permanent  damage  is  done  to  the  circuit.  Since  such  soft  errors  are  by 
their  nature  random  and  non-recurring,  the  only  practical  ways  to  deal 
with  them  are  by  shielding  the  chip  to  prevent  the  radiation  from  reach¬ 
ing  it,  by  using  circuit  design  and  layout  techniques  that  minimize  sen¬ 
sitivity  to  the  radiation,  or  by  using  error-correcting  circuits  to  cor¬ 
rect  the  erroneous  logic  signals  produced  by  the  soft  faults  after  they 
occur. 

MOS  VLSI  circuits  exhibit  a  number  of  nonstandard  fault  modes. 

These  circuits  often  employ  a  third  logic  value,  the  high-impedance  state 
Z,  permitting  a  connector  to  become  stuck-at-Z  (s-a-Z)  or  stuck-at  open 
[Wadsack  1978].  Anomalous  behavior  can  also  result  from  the  fact  that 
logic  signals  are  represented  by  charge  packages  that  are  stored  in  the 
gate  capacitance  of  an  MOS  transistor.  If  this  charge  packet  becomes 
Isolated  due  to  one  or  more  s-a-Z  faults,  then  the  signal  in  question 
no  longer  responds  correctly  to  external  signals,  and  the  corresponding 
transistor  acts  as  a  spurious  or  "parasitic"  flip-flop  [Sievers  and 
Avizlenis  1981]. 


Figure  4.4  illustrates  the  foregoing  failure  modes  for  the  case 
of  a  2-input  CMOS  NOR  gate  that  realizes  the  logical  function  z  =  xpxj. 
When  the  input  pattern  (Xj.Xg) *  (1,0)  is  applied  to  this  gate,  the  tran¬ 
sistors  Tj  and  T-j  are  turned  off,  while  T2  and  are  turned  on.  Con¬ 
sequently,  a  path  exists  from  the  primary  output  to  V$$  (ground)  via 
T»  making  z  =  0  when  no  faults  are  present.  Now  suppose  that  the  nMOS 
transistor  is  missing,  or  that  its  gate  input  line  is  open-circuited. 
This  fault  mode  corresponds  to  the  presence  of  the  stuck-line  fault  a 
stuck-at-Z,  denoted  by  a/Z.  When  (x^Xg)*  (1,0)  with  the  fault  a/Z 
present,  T4  is  not  turned  on,  causing  line  z  to  become  isolated  from 
all  sources  of  input  signals.  As  indicated  in  Fig.  4.4b,  z  retains 
its  previous  value  X  in  the  form  of  the  stored  charge  associated  with 
the  output  devices  connected  to  z.  If  X/0,  then  an  incorrect  value 
is  perceived  at  z  which  remains  present  until  either  the  associated 
charge  at  z  leaks  away,  or  else  the  input  signals  applied  to  the  gate 
are  changed.  The  other  stuck-at-Z  faults  listed  in  Fig.  4.4b  behave 
similarly. 

Just  as  short-circuit  faults  can  be  modeled  by  equivalent  s-a-0/1 
faults  in  the  manner  illustrated  in  Fig.  4.3,  the  non-classical  faults 
of  Fig.  4.4  can  also  be  modeled  by  a  standard  logic  circuit  with  s-a-0/1 
faults.  Figure  4.5  shows  a  logical  model  that  can  be  used  for  fault 
analysis  in  this  CMOS  NOR  gate  [Wadsack  1978].  It  consists  of  a  D 
flip-flop  of  unit  delay  and  several  zero-delay  gates  GjiG^.  The  D 
flip-flop  represents  the  capacitance  associated  with  the  output  line 
z.  When  T*l,  this  flip-flop  stores  the  previous  state  X.  Under  nor¬ 
mal  conditions  T*l,  z(t) «  X(t-l),  and  the  circuit  behaves  like  a  NOR 


Ill 


Hg. 


Input 

X1  x2 

Normal 

Output  z 
a/Z  S/Z 

wz 

0  0 

1 

1 

1 

X 

0  1 

0 

0 

X 

0 

1  0 

0 

X 

0 

0 

1  1 

0 

0 

0 

0 

(b) 


.4.  (a)  A  2-Input  CMOS  NOR  gate 
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gate  with  unit  delay.  Each  of  the  three  s-a-Z  faults  of  Fig.  4.4b 
is  modeled  by  a  s-a-1  fault  on  an  input  to  one  of  the  AND  gates  G^.Gg. 

For  example,  to  model  the  effect  of  a/Z,  the  corresponding  input  line 
of  G1  is  set  to  1.  When  the  sensitizing  input  combination  (Xj.Xg)* 

(1,0)  occurs,  the  output  of  G^  becomes  1  forcing  T  to  D,  thereby 
latching  the  previous  state  X  into  the  D  flip-flop. 

Another  class  of  circuits  whose  special  fault  modes  have  been 
investigated  are  PLAs  (programmable  logic  arrays)  [Ostapko  and  Hong 
1979,  Smith  1979].  PLAs  are  subject  to  faults  occurring  at  array 
crosspoints  where  a  desired  connection  is  missing,  or  an  unwanted  con¬ 
nection  is  present;  such  crosspoint  faults  are  closely  related  to  SSL 
faults  [Smith  1979]. 

The  fault  models  discussed  so  far  are  only  applicable  to  systems 
for  which  detailed,  usually  gate-level,  circuits  are  available.  Rel¬ 
atively  little  attention  has  been  devoted  to  the  development  of  higher- 
level  fault  models  of  a  kind  suitable  for  register-level  circuits  in 
which  low-level  faults  like  SSL  faults  cannot  be  seen.  Of  particular 
interest  are  functional  fault  models  in  which  fault  modes  can  be  directly 
related  to  the  logical  operation  or  function  of  the  circuit  under  con¬ 
sideration  [Breuer  and  Friedman  1980,  Sridhar  and  Hayes  1981].  It  is 
clear  that  more  research  attention  must  be  devoted  to  higher-level 
fault  modes  in  the  future  if  the  testing  problems  associated  with 
VSLI-based  systems  are  to  be  satisfactorily  addressed. 
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